## Summary
CVE-2026-87215 is an unauthenticated, network-reachable vulnerability in Oracle Hyperion Financial Management (Oracle Hyperion), affecting 11.2.26.0.000. Exploitation can lead to a hang or frequently repeatable crash, resulting in denial of service (availability impact).
## Technical Details
- Attack vector: NETWORK over TCP
- Privileges required: PR:N (none)
- User interaction: UI:N (none)
- Authentication: unauthenticated attacker
- Impact type: availability only (A:H), with no confidentiality or integrity impact reported in the NVD description
- Outcome: unauthorized ability to cause a hang or frequently repeatable crash (complete DoS)
## Affected
- Oracle Hyperion Financial Management (component: Security)
- Supported affected version: 11.2.26.0.000
## Impact
- Denial of service: hang and frequently repeatable crash of Oracle Hyperion Financial Management
- Scope: not reported as affecting other components (S:U in CVSS)
## Mitigation
1. Restrict network access to Oracle Hyperion Financial Management so the vulnerable service is not reachable from untrusted networks (given AV:N and PR:N).
2. Apply vendor-provided security updates/patches for 11.2.26.0.000 when available.
3. Monitor for signs of service instability (repeated crashes/hangs) and investigate immediately if observed.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H